mtb_crm_asp/conn.php

<?php
// 设置编码
session_start();
header('Content-Type: text/html; charset=utf-8');
header('Cache-Control: no-cache');
date_default_timezone_set('Asia/Shanghai'); 

// 数据库连接
$conn = new mysqli("127.0.0.1", "crm", "Qweasdzxc", "crm_new");
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
$conn->set_charset("utf8mb4");

// 检查登录
function checkLogin() {
    if (empty($_SESSION['employee_id'])) {
        echo "<script>top.location.href='index.php'</script>";
        exit;
    }
}

function checkAdmin() {

    if ((empty($_SESSION['em_permission_role_id'])||($_SESSION['em_permission_role_id']!=1))) {
        die("No permission , Please contact the administrator");
        exit;
    }
}


function checkPermissionDie(...$permission_role_ids) {
    // 检查会话中是否设置权限ID
    if (empty($_SESSION['em_permission_role_id'])) {
        die("No permission , Please contact the administrator");
    }

    // 如果是超级管理员（ID=1），直接返回true
    if ($_SESSION['em_permission_role_id'] == 1) {
       // return true;
    }

    // 检查当前角色ID是否在允许的角色ID中
    if(!in_array($_SESSION['em_permission_role_id'], $permission_role_ids))
    {
        die("No permission , Please contact the administrator");
    }


}

function checkPermission(...$permission_role_ids) {
    // 检查会话中是否设置权限ID
    if (empty($_SESSION['em_permission_role_id'])) {
        return false;
    }

    // 如果是超级管理员（ID=1），直接返回true
    if ($_SESSION['em_permission_role_id'] == 1) {
        return true;
    }

    // 检查当前角色ID是否在允许的角色ID中
    return in_array($_SESSION['em_permission_role_id'], $permission_role_ids);
}



// 检查管理员或组长或组员
function checkAdminOrEmployee () {
    if ((empty($_SESSION['em_permission_role_id'])||($_SESSION['em_permission_role_id']!=1)&&($_SESSION['em_permission_role_id']!=2)&&($_SESSION['em_permission_role_id']!=3))) {
       return false;
    }
    else
    {
        return true;
    }
}

// 检查是否管理员
function checkIfAdmin() {

    if ((empty($_SESSION['em_permission_role_id'])||($_SESSION['em_permission_role_id']!=1))) {
      return false;
    }
    else
    {
        return true;
    }
}


// 获取IP
function getIp() {
    $ip = $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'];
    if (strlen($ip) > 15) {
        $ip = "UnKnow";
    }
    return htmlspecialcharsFix($ip);
}

// 记录操作日志
function logAction($action) {
    global $conn;
    
    // 从SESSION获取当前用户名
    $loginName = $_SESSION['employee_name'] ?? 'Unknown User';
    
    // 获取当前IP
    $loginIp = getIp();
    
    // 当前时间
    $loginTime = date('Y-m-d H:i:s');
    
    // 记录到日志表
    $stmt = "INSERT INTO logrecord (loginName, loginIp, loginTime, loginAct) VALUES (
            '" . mysqli_real_escape_string($conn, $loginName) . "', 
            '" . mysqli_real_escape_string($conn, $loginIp) . "', 
            '$loginTime', 
            '" . mysqli_real_escape_string($conn, $action) . "')";
    
    $conn->query($stmt);
}

// 移除HTML
function removeHTML($t0) {
    if (empty($t0)) {
        return "";
    }

    $t0 = preg_replace("/<script.+?\/script>/is", "", $t0);
    $t0 = preg_replace("/<iframe.+?\/iframe>/is", "", $t0);
    $t0 = str_replace(["&lt;", "&gt;", "&nbsp;"], ["<", ">", ""], $t0);
    $t0 = preg_replace("/<.+?>/", "", $t0);
    return str_replace(["\r\n", "\t", "\r", "\n"], "", $t0);
}

// Text转HTML
function txt2HTML($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    return str_replace(
        ["&", "\"", "<", ">", " "],
        ["&amp;", "&quot;", "&lt;", "&gt;", "&nbsp;"],
        $t0
    );
}

// HTML转Text
function html2Txt($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    return str_replace(
        ["&quot;", "&lt;", "&gt;", "&nbsp;", "&amp;"],
        ["\"", "<", ">", " ", "&"],
        $t0
    );
}

// HTML编码
function htmlEncode($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $replacements = [
        chr(38) => "&#38;", chr(9) => "&#9;", chr(11) => "&#11;",
        chr(10) => "&#10;", chr(13) => "&#13;", chr(32) => "&#32;",
        chr(34) => "&#34;", chr(37) => "&#37;", chr(39) => "&#39;",
        chr(40) => "&#40;", chr(41) => "&#41;", chr(60) => "&#60;",
        chr(62) => "&#62;", chr(91) => "&#91;", chr(93) => "&#93;",
        chr(94) => "&#94;", chr(95) => "&#95;", chr(123) => "&#123;",
        chr(124) => "&#124;", chr(125) => "&#125;"
    ];

    return strtr($t0, $replacements);
}

// HTML解码
function htmlUnCode($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $replacements = [
        "&#9;" => chr(9), "&#11;" => chr(11), "&#10;" => chr(10),
        "&#13;" => chr(13), "&#32;" => chr(32), "&#34;" => chr(34),
        "&#37;" => chr(37), "&#39;" => chr(39), "&#40;" => chr(40),
        "&#41;" => chr(41), "&#60;" => chr(60), "&#62;" => chr(62),
        "&#91;" => chr(91), "&#93;" => chr(93), "&#94;" => chr(94),
        "&#95;" => chr(95), "&#123;" => chr(123), "&#124;" => chr(124),
        "&#125;" => chr(125), "&#38;" => chr(38)
    ];

    return strtr($t0, $replacements);
}

// 文本编码
function textEncode($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $t0 = trim($t0);
    $remove = [chr(8), chr(9), chr(11), chr(12), chr(10), chr(13)];
    $t0 = str_replace($remove, "", $t0);

    $replacements = [
        chr(38) => "&#38;", chr(47) => "&#47;", chr(32) => "&#32;",
        chr(34) => "&#34;", chr(37) => "&#37;", chr(39) => "&#39;",
        chr(40) => "&#40;", chr(41) => "&#41;", "（" => "&#40;",
        "）" => "&#41;", chr(60) => "&#60;", chr(62) => "&#62;",
        chr(91) => "&#91;", chr(93) => "&#93;", chr(94) => "&#94;",
        chr(95) => "&#95;", chr(123) => "&#123;", chr(124) => "&#124;",
        chr(125) => "&#125;"
    ];

    return strtr($t0, $replacements);
}

// 数字格式化
function numFormat($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $t0 = trim($t0);
    $remove = ["-", "+", "&#32;", "&", " ", chr(34), "*", "%", "'", "(", ")", "<", ">",
        "[", "]", "^", "_", "{", "\\", "/", "|", "}", "（", "）"];
    return str_replace($remove, "", $t0);
}

// 文本解码
function textUncode($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $replacements = [
        "&#32;" => chr(32), "&#34;" => chr(34), "&#37;" => chr(37),
        "&#39;" => chr(39), "&#40;" => chr(40), "&#41;" => chr(41),
        "&#60;" => chr(60), "&#62;" => chr(62), "&#91;" => chr(91),
        "&#93;" => chr(93), "&#94;" => chr(94), "&#95;" => chr(95),
        "&#123;" => chr(123), "&#124;" => chr(124), "&#125;" => chr(125),
        "&#47;" => chr(47), "&#38;" => chr(38)
    ];

    return strtr($t0, $replacements);
}

// HTML解码1
function htmlUnCode1($t0) {
    if (empty($t0) || is_array($t0)) {
        return "";
    }

    $replacements = [
        "&#9;" => chr(9), "&#11;" => chr(11), "&#13;&#10;" => "<br />",
        "&#10;" => "<br />", "&#13;" => "<br />", "&#32;" => "&nbsp;",
        "&#38;" => chr(38)
    ];

    return strtr($t0, $replacements);
}

// 格式化时间
function formatTime($ttime, $tparam) {
    if (!strtotime($ttime)) {
        return "";
    }

    $date = new DateTime($ttime);
    $tsrt = $tparam;

    $replacements = [
        "yyyy" => $date->format("Y"),
        "yy" => $date->format("y"),
        "mm" => $date->format("m"),
        "dd" => $date->format("d"),
        "hh" => $date->format("H"),
        "ff" => $date->format("i"),
        "ss" => $date->format("s"),
        "m" => $date->format("n"),
        "d" => $date->format("j"),
        "h" => $date->format("G"),
        "f" => $date->format("i"),
        "s" => $date->format("s")
    ];

    return strtr($tsrt, $replacements);
}

// 英文月份
function enMonth($m) {
    $months = [
        "1" => "Jan", "2" => "Feb", "3" => "Mar", "4" => "Apr",
        "5" => "May", "6" => "Jun", "7" => "Jul", "8" => "Aug",
        "9" => "Sep", "10" => "Oct", "11" => "Nov", "12" => "Dec"
    ];

    return $months[$m] ?? "Dec";
}

// 字符串截取
function strLeft($str, $strLen) {
    if (empty($str)) {
        return "";
    }

    $length = 0;
    $result = "";

    for ($i = 0; $i < mb_strlen($str); $i++) {
        $char = mb_substr($str, $i, 1);
        $length += (mb_ord($char) > 255) ? 2 : 1;

        if ($length > $strLen) {
            return $result . "..";
        }
        $result .= $char;
    }

    return $result;
}


// 验证邮箱
function isValidEmail($email) {
    $names = explode("@", $email);
    if (count($names) !== 2) {
        return false;
    }

    foreach ($names as $name) {
        if (empty($name)) {
            return false;
        }

        if (preg_match("/[^a-z0-9_.-]/", strtolower($name))) {
            return false;
        }

        if (str_starts_with($name, ".") || str_ends_with($name, ".")) {
            return false;
        }
    }

    $domainParts = explode(".", $names[1]);
    if (count($domainParts) < 2) {
        return false;
    }

    $tldLength = strlen(end($domainParts));
    if ($tldLength !== 2 && $tldLength !== 3) {
        return false;
    }

    if (str_contains($email, "..")) {
        return false;
    }

    return true;
}

// 站点链接替换
function sitelink_replace($t0, $t1, $t2, $t3) {
    if (empty($t0)) {
        return "";
    }

    $t4 = $t0;
    $pattern = "/(\<a[^<>]+\>.+?\<\/a\>)|(\<img[^<>]+\>)|(\<h[1-6]+[\s]*\>.+?\<\/h[1-6]+\>)/i";
    preg_match_all($pattern, $t4, $matches);

    $myarray = [];
    if (count($matches[0]) > 0) {
        foreach ($matches[0] as $i => $match) {
            $myarray[$i] = $match;
            $t4 = str_replace($match, "[$i]", $t4, $t3);
        }
    }

    if (empty($myarray)) {
        return str_replace($t1, $t2, $t0, $t3);
    }

    $t4 = str_replace($t1, $t2, $t4, $t3);
    foreach ($myarray as $i => $value) {
        $t4 = str_replace("[$i]", $value, $t4, $t3);
    }

    return $t4;
}


if(!function_exists('htmlspecialcharsFix')) {
//处理特殊字符
function htmlspecialcharsFix($input_str)
{
    return textUncode($input_str);
    //return $input_str;
}
}

if(!function_exists('htmlspecialcharsAjaxFix')) {
//处理特殊字符
    function htmlspecialcharsAjaxFix($input_str)
    {

        return textUncode($input_str);
    }
}


if(!function_exists('textDecode')) {
    function textDecode($str) {
        return textUncode($str);
    }
}


if(!function_exists('htmlDecode')) {
    function htmlDecode($str) {
        return htmlspecialchars_decode($str, ENT_QUOTES);
    }

}

if(!function_exists('formatCurrency')) {
    function formatCurrency($value) {
        return '¥' . number_format($value ?? 0, 2);
    }

}


// // 发送个人消息
// $message_id = sendMessage(
//     '个人消息标题', 
//     '消息内容', 
//     2,  // 客户相关
//     0,  // 个人消息
//     123,  // 员工ID
//     1  // 重要
// );

// // 发送部分群发消息
// $message_id = sendMessage(
//     '部门通知', 
//     '通知内容', 
//     1,  // 系统消息
//     1,  // 部分群发
//     [101, 102, 103],  // 员工ID数组
//     0  // 普通优先级
// );

// // 发送全体公告
// $message_id = sendMessage(
//     '系统升级通知', 
//     '系统将于今晚10点维护', 
//     1,  // 系统消息
//     2,  // 全体公告
//     [],  // 无需指定接收者
//     2  // 紧急
// );

// // 获取未读消息数
// $unread_count = getUnreadMessageCount();



/**
 * 发送消息函数
 * 
 * @param string $title 消息标题
 * @param string $content 消息内容
 * @param int $message_type 消息类型: 1=系统消息, 2=客户相关, 3=订单相关, 4=任务提醒, 5=其他
 * @param int $target_type 接收目标类型: 0=个人, 1=部分群发, 2=全体公告
 * @param array|int $recipients 当target_type=0或1时，接收者ID数组或单个接收者ID
 * @param int $priority 优先级: 0=普通, 1=重要, 2=紧急
 * @param int|null $related_customer_id 相关客户ID (可选)
 * @param int|null $related_order_id 相关订单ID (可选)
 * @return int|false 成功返回消息ID，失败返回false
 */
function sendMessage($title, $content, $message_type = 1, $target_type = 0, $recipients = [], $priority = 0, $related_customer_id = null, $related_order_id = null) {
    global $conn;
    
    // 验证和清理输入
    $title = mysqli_real_escape_string($conn, trim($title));
    $content = mysqli_real_escape_string($conn, trim($content));
    $message_type = intval($message_type);
    $target_type = intval($target_type);
    $priority = intval($priority);
    $related_customer_id = $related_customer_id ? intval($related_customer_id) : "NULL";
    $related_order_id = $related_order_id ? intval($related_order_id) : "NULL";
    
    // 验证必填字段
    if (empty($title) || empty($content)) {
        return false;
    }
    
    // 插入消息主表
    $sql = "INSERT INTO messages (title, content, message_type, target_type, priority, related_customer_id, related_order_id) 
            VALUES ('$title', '$content', $message_type, $target_type, $priority, $related_customer_id, $related_order_id)";
    
    if (!$conn->query($sql)) {
        return false;
    }
    
    // 获取新插入消息的ID
    $message_id = $conn->insert_id;
    
    // 处理接收人
    if ($target_type == 0 || $target_type == 1) {
        // 个人消息或部分群发
        if (!is_array($recipients)) {
            $recipients = [$recipients]; // 转换为数组
        }
        
        if (empty($recipients)) {
            return false; // 接收人为空，返回失败
        }
        
        // 插入接收人记录
        $values = [];
        foreach ($recipients as $employee_id) {
            $employee_id = intval($employee_id);
            if ($employee_id > 0) {
                $values[] = "($message_id, $employee_id, 0, NULL, 0, NOW())";
            }
        }
        
        if (!empty($values)) {
            $recipientSql = "INSERT INTO message_recipients (message_id, employee_id, is_read, read_time, is_deleted, created_at) 
                             VALUES " . implode(",", $values);
            $conn->query($recipientSql);
        }
    } else if ($target_type == 2) {
        // 全体公告，不需要添加接收人记录
        // 在message_list.php中通过target_type=2来判断全员可见
    }
    
    // 记录操作日志
    logAction("发送消息: $title");
    
    return $message_id;
}

/**
 * 获取未读消息数量
 * 
 * @param int $employee_id 员工ID，默认为当前登录员工
 * @return int 未读消息数量
 */
function getUnreadMessageCount($employee_id = null) {
    global $conn;
    
    // 如果没有指定员工ID，使用当前登录员工ID
    if ($employee_id === null) {
        if (empty($_SESSION['employee_id'])) {
            return 0;
        }
        $employee_id = $_SESSION['employee_id'];
    }
    
    $employee_id = intval($employee_id);
    
    // 查询未读消息数量
    $sql = "SELECT COUNT(*) AS count 
            FROM messages m 
            LEFT JOIN message_recipients mr ON m.id = mr.message_id AND mr.employee_id = $employee_id
            WHERE (m.target_type = 2 OR (mr.employee_id = $employee_id)) 
              AND (mr.is_deleted = 0 OR mr.is_deleted IS NULL)
              AND (mr.is_read = 0 OR mr.is_read IS NULL)";
    
    $result = mysqli_query($conn, $sql);
    $row = mysqli_fetch_assoc($result);
    
    return intval($row['count']);
}